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(54) NETWORK CONNECTOR AND NETWORK COMMUNICATION SYSTEM 

(57)Abstract: 

PURPOSE: To conceal between which terminators communication is implemented and 
to conceal the content of the communication by sending data subjected to capsule 
processing while composing the data into a packet. 

CONSTITUTION: A ciphering decision section 42 checks whether or not a path 
selected by a path selection section 1 1 is equivalent to a path stored in a secrecy 
protection required path storage section 43 and decides ciphering of packet data 
when the path is equivalent to the secrecy protection required path. The ciphering is 
implemented by a ciphering/decoding processing section 40. Then a data capsule 
processing section 41 implements processing of incorporating ciphered data into a 
packet as transmission data by selecting a network connector located in a region at 
the outside of secrecy protection range as if it were a final destination and using its 
own network connector as if it were a first sender. In this casewhen it is clear that 
the data are ciphered datathe ciphering/decoding processing section 40 decodes the 
data into the original packet and the decoded data are sent to a final equipment being 



a true final destination. 
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CLAIMS 



[Claim(s)] 

[Claim 1]It is provided in a part which connects two or more subnetworks since a 
network which communicates by a connectionless type packet is constitutedln a 
network connection apparatus which analyzes information on a received 
packetselects a sending-out courseand sends out a new packetA security required 
path storage section which makes a range which cannot carry out security memorize 
for every sending-out courseAn encryption deciding part which opts for a data 
encryption about a network layer of a packet when it is what passes a security 
required course in which transfer paths selected based on a final destination of a 
packet are remembered to be encryption and a decoding processing part by said 
security required path storage sectionA network connection apparatus which is 
provided with an encapsulation part which processes a network connection apparatus 
located in a place which escaped from a range which cannot carry out security as a 
final destination of said enciphered dataand is characterized by building encapsulated 
data into a packet and sending it out. 

[Claim 2]In a network communication system in a network which two or more 
subnetworks which communicate using a connectionless type packet are connected 
via a network connection apparatusand changesWhen a range which cannot carry out 
security is included in a course to a final destination of a received packet in a 
network connection apparatus of the transmitting sideEncipher data about a network 
layer of a received packetand build a network connection apparatus in a part beyond 
said range into a packet new as a final destination of said enciphered dataand it is 
sent outA network communication system decrypting enciphered data in a network 
connection apparatus made into a final destinationand sending out to the next. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Industrial Application]This invention relates to the network connection apparatus and 
network communication system in the network which comprises two or more 
subnetworks which communicate using a connectionless type packet. 
[0002] 

[Description of the Prior Art]Packet communication includes connection-oriented 
type (or connection oriented type) packet communication and connectionless type 



packet communication. Connection-oriented type packet communication performs 
transmission (phase 3) of information or a message main partafter performing 
connection (phase 1) of a communication lineand setting out and establishment 
(phase 2) of a data link. Connectionless type packet communication performs the 
phase 3 suddenly. This invention is related to the latter. 

[0003]There are some which two or more subnetworks were connected via the 
network connection apparatusand were constituted in the network of data 
communications. Howeverif it communicated in the form as it isthere are some which 
cannot keep secrecy in a subnetwork. 

[0004]Secrecy cannot be kept in a subnetwork connectable by the 3rd unspecified 
personsuch as ordinary public circuit exchange network and a public telephone 
network. Such a subnetwork is called Black subnetwork. On the other handthe 
subnetwork in which connection by the 3rd unspecified person is impossible is called 
White subnetwork like the line switching network in a companyor LAN in a company 
(Local Area Network). 

[0005] Drawing 6 is a figure showing one example of the network with which the 
subnetwork of Black and the subnetwork of White are contained. In drawing 6 a 
terminating setE-Hand K of 50-56 are subnetworks a network connection 
apparatusand 57-59. It is an end user of data communicationsand a packet is first 
sent from these and the terminating sets 57-59 are eventually sent into these. The 
network connection apparatus 50-56 make connection between subnetworks. In this 
examplethe subnetwork H is Black and the subnetwork K is White. 
[0006]When sending a packet to the terminating set 59 from the terminating set 57the 
following two courses can be considered. The 1st course is a course of the 
terminating-set 57 -> network connection apparatus 52 -> subnetwork K-> network 
connection apparatus 56 -> terminating set 59. The 2nd course is a course of the 
terminating-set 57 -> network connection apparatus 51 -> subnetwork H-> network 
connection apparatus 55 -> terminating set 59. Since it passes along the subnetwork 
H of Black when sent in the 2nd coursesecurity is not guaranteed. 
[0007]Thenthe applicant has already proposed the network communication system 
sent after checking a partner by exchanging passwords a priori as a communication 
method for security (Japanese Patent Application No. No. 26900 [ four to ]). Drawing 
2_is a figure showing the network connection apparatus used with such a 
communication method, in drawing 2 — 10 — a destination deciding part and 1 1 — a 
channel selection part and 12 — a path storage section and 14 are [ a reliability 
determination part and R of an interface and 1 6 ] network connection apparatus a 
certification information reply part and 17 a packet treating part and 15 the course 
Management Department and 1 3. 

[0008]each interface 15 — LANa public networkand a dedicated line — it is an 
interface for connecting. 

The internal configuration changes with partners who connect. 



It is provided suitably to what kind of subnetwork these interfaces are connected. 
[0009]The packet received via a certain interface is sent out via another 
interfaceafter being processed by the packet treating part 14. The packet treating 
part 14 reads the information on the received packetand processes it in the form 
which can be sent out to the next destination (for examplethe following address is 
given). When the destination deciding part 10 - the path storage section 13 carry out 
the processingthey play an auxiliary role. 

[0010]The path storage section 13 has memorized the database about a network 
courseand when there are deletion of a coursechangean additionetc.the course 
Management Department 1 2 updates a database and manages it. The channel 
selection part 1 1 refers to the data of the path storage section 1 3and chooses the 
course which sends a packet. The destination deciding part 1 0 determines the part 
which should be transmitted to the next 

[001 1]The reliability determination part 17 determines whether the selected course 
can trust it on security. The password first provided in the partner's network 
connection apparatus which it is trying to send beforehand is sent. It is judged as the 
partner who can trust it if certification information is replied from a partnerand data is 
sent. The certification information reply part 16 is a portion which replies certification 
informationwhen self receives a password. 

[0012]As document about the conventional technology of such data 
communicationsthey are JP64-68044A and the publication number 3for example. - 
There is a No. 13146 gazette. 
[0013] 

[Problem(s) to be Solved by the Invention](Problem) Howeverin the communication 
directly performed by Hazama of network connection apparatus who has defined the 
password of security beforehandin the network connection apparatus and network 
communication system of the above mentioned former which perform security by 
password exchangecan carry out securitybut. Among the middles were other network 
connection apparatusandin the communication indirectly performed via itthere was a 
problem that security could not be carried out. 

[0014](Explanation of a problem) In drawing 6 the network connection apparatus 51 
and the network connection apparatus 55 presuppose that it is a network connection 
apparatus like drawing 2 constituted so that password exchange for security could be 
performed. When both up a circuita course judges Black or White. 
[0015]Howeverwhen a course consists of two or more subnetworks and other 
network connection apparatus intervene in betweensecurity may not be able to be 
carried out in password exchange. Nextthe example is shown. 
[001 6] Drawing 10 is other examples of the network which comprises two or more 
subnetworks. As for A~Da terminating setand 7-9 are network connection apparatus 
a subnetworkand 1 -6. The subnetwork ACand D is LAN (Local Area Network)for 
exampleand the subnetwork B is a public network (X.25). 



[001 7]The terminating set which is an end user is connected to each subnetwork. For 
examplethe terminating sets 1 and 2 are connected to the subnetwork A. Connection 
between a subnetwork and a subnetwork is made by a network connection apparatus. 
For exampleconnection between the subnetwork A and the subnetwork B is made by 
the network connection apparatus 7. 

[0018]To the terminating set and network connection apparatus in a networkthe 
network address accepted in the whole network and the subnetwork address 
accepted within the subnetwork which is involving are given. Since the number of the 
subnetworks in which a terminating set participates is onethe number of the 
subnetwork addresses is onebut since the subnetwork in which a network connection 
apparatus participates is pluralitytwo or more subnetwork addresses are given. 
[001 9]A packet is first sent out from a certain terminating setand attains the purpose 
by being sent to other terminating sets. When sending to the terminating set of other 
subnetworksit is sent via a network connection apparatus. For examplewhen sending 
to the terminating set 6 from the terminating set 1 of drawing 10 as a dotted line 
showsit is sent in the course of the terminating-set 1 -> network connection 
apparatus 7 -> network connection apparatus 8 -> network connection apparatus 9 - 
> terminating set 6. 

[0020]Since the subnetwork B is a public networkwhen it passes along thissecrecy 
may leakand there is doubt of Black. Temporarilyeven if the network connection 
apparatus 7 and 8 can perform communication which carried out security by password 
exchangesecrecy may leak in the network which intervenes on the wayand they 
cannot necessarily perform secret protection thoroughly. 

[0021]Becausein the subnetwork which the packet transmitted passes on the waythe 
information about a data contenta final destinationetc. may be stolen by a certain 
means. 

[0022]In the network containing LAN which was described above. As the protocol 
systemThe basic reference model of open systems interconnection as shown in 
drawing 8 (Open Systems Interconnection Basic ISO 7498 Information processing 
systems) referencemodel is adopted. This comprises seven layersthe 1 st layer 
physical layerthe 2nd layer data link layerthe 3rd layer network layerthe 4th layer 
transport layerthe 5th layer session layerthe 6th layer presentation layerand the 7th 
layer application layer. Thereforecomposition of a packet is also made into the form 
where this protocol system was followed. 

[0023j Drawing 7 is a figure showing the composition of a packet. 20 a packet and 21 
an address subnetwork address and 22 A transmitting subnetwork addressAs for 23 
and 25a data division and 24D other information bureaus and 24 Packet dataAs for a 
final destination device network address and 2826 is [ other information bureaus and 
30 ] data of the 4- 7th layer a transmission source device network address and 29 a 
protocol header and Fixed Partand 27. The packet data 24D are stored in the data 
division 24. 



[0024]The packet at the time of shipping towards the terminating set 6 from the 
terminating set 1 of the network of drawing 10 is taken for an exampleand the value 
indicated to each address of address subnetwork address 21 grade is explained. A 
subnetwork address will attach and express the numerals (ABCD) of a related 
subnetworkand a network address will attach and express N. In the transmitting 
subnetwork address 22the address of the part which sends out this packeti.e.the 
subnetwork address of the terminating set 1(1A) is indicated. 
[0025]In the address subnetwork address 21 if the terminating set 6 is in the same 
subnetwork A as the terminating set 1the subnetwork address of the terminating set 
6 will be indicated. Howeversince the terminating set 6 is in Haruka or the left 
subnetwork Din order to go thereit must go exceeding other subnetworks. In such a 
casethe subnetwork address (7A) about the subnetwork A of the network connection 
apparatus 7 which is the present address is indicated. Thusthe address subnetwork 
address 21 and the transmitting subnetwork address 22 are rewritten whenever it 
exceeds a subnetwork. 

[0026]The network address (6N) of the terminating set 6 to send into the final 
destination device network address 27 eventually is indicatedand the network address 
(1 N) of the transmitting agency terminating set 1 sent out first is indicated at the 
transmission source device network address 28. After each packet reaches the 
terminating set 6 which is a final destinationit is assembled by the order specified at 
the time of sending out. 

[0027] Drawing 9 is a figure showing change of the composition of the packet which 
has a network of drawing 10 conveyed. Numerals support the thing of drawing 7 . From 
the terminating set 1 drawing 9 (b) is the packet composition in the case of sending to 
the network connection apparatus 7and was already described. 
[0028] Drawing 9 (**) is the packet composition in the case of sending to the network 
connection apparatus 8 from the network connection apparatus 7. The transmitting 
subnetwork address 22 is rewritten with the subnetwork address (7B) about the 
subnetwork B of the network connection apparatus 7The address subnetwork address 
21 is rewritten by the subnetwork address (8B) about the subnetwork B of the 
network connection apparatus 8. The transmission source device network address 28 
and the final destination device network address 27 remain the same. 
[0029] Drawing 9 (**) is the packet composition in the case of sending to the network 
connection apparatus 9 from the network connection apparatus 8. The transmitting 
subnetwork address 22 is rewritten with the subnetwork address (8C) about the 
subnetwork C of the network connection apparatus 8The address subnetwork address 
21 is rewritten by the subnetwork address (9C) about the subnetwork C of the 
network connection apparatus 9. The transmission source device network address 28 
and the final destination device network address 27 remain the same. 
[0030] Drawing 9 (**) is the packet composition in the case of sending to the 
terminating set 6 from the network connection apparatus 9. The transmitting 



subnetwork address 22 is rewritten with the subnetwork address (9D) about the 
subnetwork D of the network connection apparatus 9and the address subnetwork 
address 21 is rewritten by the subnetwork address (6D) of the terminating set 6. The 
transmission source device network address 28 and the final destination device 
network address 27 remain the same. 

[0031]Thusa packet is an intermediate subnetwork and network connection 
apparatusand since it is analyzed the communication to which terminating set from 
which terminating set it isin going via a subnetwork and a network connection 
apparatus without the guarantee of securitythere is a possibility that data may be 
stolen. This invention makes it SUBJECT to solve such a problem. 
[0032] 

[Means for Solving the Problem]It is provided in a part which connects two or more 
subnetworks since a network which communicates by a connectionless type packet in 
this invention in order to solve said SUBJECT is constitutedln a network connection 
apparatus which analyzes information on a received packetselects a sending-out 
courseand sends out a new packetA security required path storage section which 
makes a range which cannot carry out security memorize for every sending-out 
courseAn encryption deciding part which opts for a data encryption about a network 
layer of a packet when it is what passes a security required course in which transfer 
paths selected based on a final destination of a packet are remembered to be 
encryption and a decoding processing part by said security required path storage 
sectionWe had an encapsulation part which processes a network connection 
apparatus located in a place which escaped from a range which cannot carry out 
security as a final destination of said enciphered dataand decided to build 
encapsulated data into a packet and to send it out. 

[0033]In a network communication system in a network which two or more 
subnetworks which communicate using a connectionless type packet are connected 
via a network connection apparatusand changesWhen a range which cannot carry out 
security is included in a course to a final destination of a received packet in a 
network connection apparatus of the transmitting sideEncipher data about a network 
layer of a received packetand build a network connection apparatus in a part beyond 
said range into a packet new as a final destination of said enciphered dataand it is 
sent outln a network connection apparatus made into a final destinationwe decided to 
decrypt enciphered data and to send out to the next. 
[0034] 

[work — ] for In a network which two or more subnetworks which communicate using 
a connectionless type packet are connected via a network connection apparatus in 
this inventionand changesWhen it is going to carry out secret communication between 
points which sandwiched a subnetwork which cannot carry out securitya network 
connection apparatus which had special composition in those points is installed. 
[0035]When a range which cannot carry out security is in a course which transmits 



from there in this network connection apparatusData including address information of 
the first transmitting terminating set and the last address terminating set is 
encipheredand it has packet composition addressed to a network connection 
apparatus located in a place which escaped from a range which cannot carry out 
security of itand sends (encapsulation). A network connection apparatus which 
received it decrypts enciphered dataand sends it to a terminating set of a final 
destination with the usual packet composition. 

[0036]If it is within limits which cannot carry out securitysince it passes in a form of 
the usual packet addressed to a network connection apparatus located in a place 
which escaped from the rangethe fact among which terminating sets communication 
was really performed can be hidden. Since it is enciphereddata can hide the contents. 
[0037] 

[Example]Hereafterworking example of this invention is described in detail based on 
Drawings. Drawing 1 is a network connection apparatus of this invention. Numerals 
correspond to the thing of drawing 2 andas for encryption and a decoding processing 
partand 41 an encryption deciding part and 43 are security required path storage 
sections a data encapsulation part and 42 40. These are the composition provided 
specially because of security. The network connection apparatus which has such 
composition is installed in the connection section of the subnetwork which can carry 
out securityand the subnetwork which is not made. Hereaftereach formation part is 
explained. Since the thing of the same numerals as drawing 2 achieves the same 
operation and a functionthe explanation is omitted. 

[0038]The security required path storage section 43 memorizes whether security is 
guaranteed to which network connection apparatuswhen sending a packet in which 
course. For examplethe security required path storage section 43 of the network 
connection apparatus 7 of drawing 1 0 remembers the network connection apparatus 9 
that security is not guaranteedwhen sending out in the direction of the subnetwork B. 
[0039]The encryption deciding part 42 investigates whether the course selected in 
the channel selection part 1 1 is equivalent to the course memorized to the security 
required path storage section 43and when it correspondsit determines to encipher the 
packet data 24D of drawing 7 . Encryption is performed by encryption and the 
decoding processing part 40. Arbitrary things can be used for the technique of 
encryption. Encryption and the decoding processing part 40 also perform 
decryptingwhen the enciphered data is received. 

[0040]The data encapsulation part 41 makes a final destination the network 
connection apparatus located in the place which escaped from the range which 
cannot carry out securityand a self network connection apparatus as first 
transmitting originProcessing incorporated in a packet by using the aforementioned 
encryption data as send data (this is made [ of explanation ] "encapsulation" for 
convenience) is carried out. 

[0041] Drawing 3 is a figure showing the composition of the packet which encapsulated 



encryption data. Numerals correspond to the thing of drawing 7 and a capsule 
construct and 32 31 A protocol and FixedPartAs for a final destination network 
connection apparatus network address and 34other information bureaus and 36 are 
encryption data storing parts a transmitting agency network connection apparatus 
network address and 35 33. 

[0042]When it becomes clear that it must send out to the course which cannot do 
security as a result of analyzing the received packet with the network connection 
apparatus of this inventionThe packet data 24D about a network layer are 
encipheredand it is stored in the encryption data storing part 36 as the same 
treatment as the send data of the usual packet. 

[0043]At and equivalent to the final destination device network address 27 (refer to 
drawing 7 ) in the usual packet compositionthen the final destination network 
connection apparatus network address 33 at the time. The network address of the 
network connection apparatus located in the place which escaped from the range 
which cannot carry out security is indicated. At equivalent to the transmission source 
device network address 28 (refer to drawing 7 ) in the usual packet compositionthen 
the transmitting agency network connection apparatus network address 34 at the 
time. The network address of the network connection apparatus which is going to 
shipself network addressi.e.packetis indicated. 

[0044] Drawing 4 shows the example of the packet which stored encapsulation data. 
Since this is a network of drawing 1 0 and it is a range which cannot carry out security 
between the network connection apparatus 7 and 9In order to carry out 
communication from which secrecy does not leak among bothin the environment 
where the network connection apparatus of this invention is used as the network 
connection apparatus 7 and 9the packet sent to the terminating set 6 from the 
terminating set 1 is a thing in the state where it was remade with the network 
connection apparatus 7. 

[0045]Numerals support the thing of drawing 3 . The address of the transmission 
source device network address 28 is made into the network address (1N) of the 
terminating set 1 1t is enciphered in a form as it isand the packet data 24D in which 
the final destination device network address 27 was made into the network address 
(6N) of the terminating set 6 are stored in the encryption data storing part 36. Let the 
transmitting agency network connection apparatus network address 34 be a network 
address (7N) of the network connection apparatus 7 which is just going to ship this 
packet now. Let the final destination network connection apparatus network address 
33 be a network address (9N) of the network connection apparatus 9 located in the 
place which escaped from the range which cannot carry out security. 
[0046]The network connection apparatus 7 with which the transmitting subnetwork 
address 22 is just going to ship this packet nowlt is considered as the subnetwork 
address (7B) about the subnetwork Band let the address subnetwork address 21 be a 
subnetwork address (8B) about the subnetwork B of the network connection 



apparatus 8 which is the present destination. 

[0047]If a packet is sent with such compositionin the intermediate network 
connection apparatus which cannot carry out securityit will be dealt with as a usual 
packet whose first transmitting origin is the network connection apparatus 7 and 
whose final address is the network connection apparatus 9. Thereforethe network 
connection apparatus located in the place which escaped from the range which 
cannot carry out security is sent not understood at alland where true transmitting 
origin and a true final destination are goes. Even if it tries to steal send data with an 
intermediate network connection apparatussince it is encipheredthe portion cannot 
know the contents. 

[0048]Although the network connection apparatus 9 located in the place which 
escaped from the range which cannot carry out security is also used as the network 
connection apparatus which has the composition of this inventionif a packet is 
receivedit will be judged whether it is what has been enciphered and encapsulated. 
The judgment is made by investigating whether it has passed along the course 
registered into the security required path storage section 43 as where a transmitting 
agency is (in the case of an upper example network connection apparatus 7). 
[0049]When it becomes clear that it is encipheredit decrypts to the original packet 
data 24D by encryption and the decoding processing part 40and this is sent to the 
terminating set 6 which is a true final destination with the usual packet composition. 
[0050] Drawing 5 is a flow chart showing a send action which the network connection 
apparatus of this invention mentioned above. 
Step 1 — A packet is received. 

Step 2 — The received packet is analyzeda course is chosen and the address which 
transmits to the next is determined. 

Step 3 — That the selected course takes the measure of security checks with 
reference to the security required path storage section 43 for whether it is a required 
course. If it does not passit transmits to the nextwithout taking the measure of 
security. 

Step 4 — When it passes along the course which needs securitysend data is 
enciphered including the information on the final destination and first transmitting 
origin. 

Step 5 — The enciphered data is encapsulated. 
Step 6 — It transmits to the following address. 

[0051]In order to carry out the network communication system of this inventionlt is 
not necessary to change the network connection apparatus of the whole network into 
the thing of the composition of this inventionand since what is necessary is to install 
the network connection apparatus of this invention only in the point which is going to 
carry out communication which only carried out securityit can carry out easily at 
cheap cost. 
[0052] 



[Effect of the InventionjAs stated aboveaccording to the network connection 
apparatus and network communication system of this invention. When the range which 
cannot carry out security is in the course which transmits from there when it is going 
to carry out secret communication between the points which sandwiched the 
subnetwork which cannot carry out securityData including the first transmitting 
terminating set and the last address terminating set is encipheredand it has packet 
composition addressed to a network connection apparatus located in the place which 
escaped from the range which cannot carry out security of itand sends 
(encapsulating). 

[0053]Thereforeif it is within limits which cannot carry out securitysince it passes in 
the form of the usual packet addressed to a network connection apparatus located in 
the place which escaped from the rangethe fact among which terminating sets 
communication was really performed can be hidden. Since it is enciphereddata can 
hide the contents. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] A network connection apparatus of this invention 

[Drawing 2] The conventional network connection apparatus 

[Drawing 3] The figure showing the general composition of the packet which stored 

encapsulation data 

[Drawing 4] The figure showing the example of the packet which stored encapsulation 
data 

[Drawing 5] The flow chart showing the send action of the network connection 
apparatus of this invention 

[Drawing 6] The figure showing one example of the network with which the subnetwork 

of Black and the subnetwork of White are contained 

[Drawing 7] The figure showing the composition of a packet 

[Drawing 8] The figure showing the basic reference model of open systems 

interconnection 

[Drawing 9] The figure showing change of the composition of the packet which has a 
network of drawing 10 conveyed 

[Drawing 10] The figure showing other examples of the network which comprises two 
or more subnetworks 
[Description of Notations] 

1-6 — A terminating set7-9 — A network connection apparatuslO — Destination 
deciding parti 1 [ — Packet Management Department] — A channel selection parti 2 
— The course Management Departments — A path storage section 14 15 — An 
interfaced — A certification information reply parti 7 — Reliability determination 



part20 — A packet24D24D 1 24D 2 — Packet data31 [ — An encryption deciding part43 
/ — A security required path storage section50-56 / — A network connection 
apparatus57-59 / — A terminating setA-HK / — A subnetwork and R are network 
connection apparatus. ] — A capsule construct40 — Encryption and a decoding 
processing part41 — A data encapsulation part42 
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[0 0 0 4] Htt&£®tt3^?££*^&£®? 
14, rcDJ:54+r7*-y h 

7-frtt, Black &*7*y <hwfctl5„ - 

IkfllAlslteajtM^&ttALAN (Local Area Net 
work) ©«fc?lc. 7W£«S3*(cJ:««nitf7RraBft 
+r7*y h7-fr(4. White h7~7<twfc 
ft*. 

[0 0 0 5] g]6(4, Black <W7*'y h7— 7i:Whit 
e h7™*£#«tlTt^5*y h7-?<D 

1 flftattWPSS. H 6 (C^T, 5 0 ~ 5 6 (4*-y 
h7~21M«W» 5 7~5 9(4^iigB, E~H, K 
14*7* y h 7 — 9 T°&Za t&HSB 5 7 ~ 5 9 y 
-^iifgoxv Kn— y-T-fcy, «*HCEftS#S/t 
fry httSHiStu WlttfcEftSUjityJIW-Sft*. 
*-y K7-*»ttillI5 0-5 614, +r7*-y r-7-fr 
IB©«tt*fi5. E ©0.17(4, +r7*-y r-7-frH(4BI 
ack T*y % +r7*<y h7-? K(4White T*25£ 0 

[0 0 0 6] *?SI£H5 7fr6H«gB5 9^tfr<y r- 

*ai*«&» «©2offl«»ij«*jL6ft*. iii©«s& 

14, WmmW 5 7 -»* -y h 7— ? ggggM 5 2 ->+r 7* 
•y h7-frK-^*>y h7-frS^gM5 6^SgS5 
9t^3«BT»*. ^2(7)^14, »4IW115 7-»* 
•y h7-frg^»5 1 -**7*-y h7-frH-»*-y h 

M2 0«^5M6ftfclf^ Black <W7*-y h7— ? 

H*a*o?» «HM6iitt«iE*ftaL\ 

[0 0 0 71 K?, ««S«©fc»©afflS*5££ L 
Tn »Hi»c/tX7-K*«*-r*ct(cJ:y, tB#^5i 
BLT^6aS**y h7-*3M»a*. ttJBAttRlc 
«UM (#P¥4 - 26900^) „ H2{4s 
5*JWi*SCT»ffl^6ft**y K7-f 
HT»*. H2Kfi^T» 1 0l4SiM5fe^g|5, 1 1(4 
12BSK«3as. 1 3l4igKfB1iSI5. 1 
4(4/\°fr-y hSaSSP, 1 5(4-f>^7x-7x, 1 6I4H 
liE1f$8Jiflgp, 1 7ttflMfitt»36», FU4*-yh7-fr 

[0 0 0 8] S0^7i-X1 514, mZtfLANt 

tMammm t t^mmmt & t mmt * fctto-r > * 7 

x-XT^y, 3g^-r§ffi#lcd;oT^rortg|?«fi)6l4M 
z:ft50'r>-?7x-7t4, ifOJ:5S+r7*-y 

h7-7KSM)rr*frte«j:oT» iiaistteft^o 

[0 0 0 9] aE£-f>$7x-X£frLTS^Sftfc 
/^fr-y hti. /\°fr-y 4T-ffiS*ftfc^ S"J© 

-f>*7i-x*^LTaym*ft*. /\ 0 fr-> r-^asp 

14(4, S^Sofe/tfry K0flHB*«3SrtRy % «©K 

o K9^%gflS1 0~MB1ig|51 3(4, 
[0 0 10] «MB1ta51 3(4*7 h7-7©«HHEH 
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rsT-^^-xsEHLTfey^ gg«98i 214, 

«E9rLT*3*-*. 8BStt«l 114, £ttEttBl 

5„ tsgftst^flsi 0(4, ftKiasr^^fiB^ias-r 

[0011] fflMttStCBl 7 14, SftLfegEHftKB 

T**£ffiSK»***#£fy»rU x— ISaE 
flMXflWl 614, gStf/\'X9-K£§ttS*ofcJi£ 

[0012] cojjeaT-^afliflMasafBicH-r* 

Sittt LTt4, ftftOtf BIIB64-68044 
3- 1314«4HStfS*. 
[00 13] 

[»IB#j|iaLJ:3tr*WK (DUD LfrL&tf 

H7-*»«i«a3J:tf*y h7-*»ffl*5S 
?{4, *i&«effiB<D/tt7- K*j£a&TU»**v h7 

[0014] (fil!£4)KH) M 6 Kfcl^T, * v h 9 
-*««SI15 1 r-7-*SHaBS«5 5*tf, « 

ffifiSS©fca&©/tt7- K3as*fft^S J: 3«fi8*ft 
fc H2©J:3fc*yh7-*»««ll?**£**. 
K«ttH««upr*ll. HKtfBlack fl«iitefr**HK 

r*. 

[0 0 15] LfrU fflMHMBM)*?** 

[0 0 16] mi 0(4, W»««-^*» h7-*frS* 

i~6i4^si8a. 7~9i**» h7— ^aeiRi 

?:/*y h7~7A. C. Dt4, flfctfLA 
N (Local Area Network) TaVJ, h7~ ? B 
14. ii«lHlM (X. 2 5) 
[0 0 17] #+*-7*y r-7— frfctt, i>h'2-f- 
?*S»ll|g«tf^**iT^*. 0J*.t#, 7*v h 
7— ?AW4, iSSSSSEMI, 2tfjg$i**lTl^o +r7 
*y K7-*i:tf7*y r- 7 -<?<!: ©^4, *y h7 
-*S«g«fcJ:oTfT*>*i«. ?7*yh7 
-*A£?7** K7~*B *yh7-* 

[0 0 18] *y K7— ?AKS«*W«**y h7 



r-7— ?7 KUX.!:, H4LT^51t^*y r-7- 

Tl/»*. WKSWHteT*??** h 7-^41 of 
S«fr6« h7-?7 KUXI4 1 

!b\ *y K7— ^JgttfflltflH^-r*^*^ K7-^ 
ttWRTSSfrG* v r-7-?7FU7. 

[0019] ivr? hit. Mncnzmzmtftzmv 
m*tu ffiflD^JHSK^si+shscticfcy, gw* 

31TS. fl!j©?7*y|«7-*©»^«N&5»&fc: 

i4. *y h7— tmmmwzm&LTmifztiZe mx 

(4, j5jg7^-r<fcaic> »«|g|11-»*yh7-*«« 

«9->»4KS«!16 t^a«KTSl7-6h*. 
[0 0 2 0] +r?*y 1*7-* Btt£*|l]««?S*fc 

46, cc«a*t*iE««tf»h.*RriBtttfJ6y, Biac 

k em^3D*o ffilc, *>y K7— ^WWW7. 8(4 
/U7- J: y «e«H« LfciWitf B**fc© 

[0021] s-tfse. (eas**t6/^y hi4, a* ? 
aar*V^*v h7—7^tj^T, flSicoWBU:* 

[0 0 2 2] a»BLfeJ:aa:LAN*d«S*y h7— ? 

SdSS'X^IwnBfiSJMJKOaW^IBt^U (ISO 7498 I 
nformation processing systems. Open Systems Interc 
onnection Basic referencemodel ) ^Sffl^tlTl" 1 

*o znit, m i mwm. mmr-wy^m. m 

3g*-yh7-^«, !4Ih7>X*-H, ^51 
-b->->3>®, I617uryr->a>l, WHM7 
7'J -7— > a VS© 7 Bfr 5*?|J$£ ftTl^o ^oT, 

[0023] H7{4, /tt-y hoaMMrjRTH?**. 
2 Ott/^y h, 2 1 1t»jfctf7*y h7— ?7 KU 
7., 2 2l43Mfl^7^.y h7— ?7KUX, 2 3, 2 5 
f4^<Dffi©1f$B35, 2 414X— 5»gP, 2 4 DteM^y h 
x— 2 6l47Pr-=];U^y^fcJ:OTixed Part, 2 
7ti»«ijfc««*y h7-^7 KUX, 2 8P4Sffi7C 
mWZv r-7—?7KUX, 2 9 t*^-C7fteCDlW ISBfl, 3 
0(4SI4~7SOt-^TSSo x-t ?g|!2 4tcl4, /f 

^y hx-^2 4 d mmtiZo 

[0 0 2 4] H1 0O*y h7— ^0)»*SBai1^Slft 
*SS«6(cfiiW-T98Si-r*IB©/^y h«Wcty, 
5t-"77'*y r-7—77 FU7.2 1 KUXtcBK 
r*«HC"3^TRWrS. h7— ?7F 
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i^xits mmz>y?'*v ^7—70^ (a, b. 

C, D) ZttLTmU *y h9-^7KUXttN*f* 
LT*T ZtlZt%„ iifr?7*y H9--77FUX2 
2 let*. K*Siy/c-r@m©7KUX, Of 

^SiI10+f7^7 h7~ 77 FU7. (1 A) £13 

[0 0 2 5] ?S$W*y b7~77FUX2 HC«, 

Art(C»htt, t*tt£H6<D1t7*y h7-*7KU3. 

h7-?£S*Tfffr&tttU;f&535:l\ ^dl^ 

+f7*y h7— ?AtcWr-5+f7*'y h7-~ 97 K 
UX (7 A) ffEKSft*,, CCDi^lC J&jfctfT^y 
h7—77FUX2 1 <hiMft-?7*y h7~ 77FU3. 
2 2<h«. h7-**iBjl*fffc* »**A6 

[0 0 2 6] «^5t«m*y H7—77FU7.2 7K 
tt» «*»fc£yjStffcl«HII&«6fl!)*y H7— 77 

fut. (6N) msnztu mmytmrnzv w-vt 

FU7.2 8 fcti % Affiles y tBf jSHItc^^S 1 0* 
y h7~77FU7. (1 N) «Jtl5. #M*fry h 

[0 0 2 7] H9tt> HI 0©*y h7-*«KaMrft 
\°-5r y h ©iifi&DSflsSS-r H?S «. ff^UH 7 © 

y vv-twmwi^kwksvivrv must* 

[0 0 2 8] B9 (P) it. *yh9-^«IIIM7* 
5*y h7— ?S«cilS8's3l«Ji^©/\°^<y f-«U8? 
£3o Sft+Wy h7—77KUZ2 26\ *yh-7 
--7&i§SB 7 <W7* y h 7-<7 B im?*??*? 
h7— 77FUX (7B) i»*»jl6tu Sfc$fc+J-7* 
y h7—77KUX2 1 A\ *y K7— 2SMiSll8eD 
h7-*BtEHT*?7*y h7— 77KUX 

(8B) icwsaastiT^*. iSfiTcSs^y h7- 

97FUX28, h7-*7KUX2 

[0 0 2 9] H9 (A) Os *•> K7— ?SW(8II8# 
5*y h7-fSN««ll9'\ai*li^<0/^y must* 
£3„ aSflW-^y h7-?7 FUX2 2*>\ *y h-7 
8 <W?*y h 7-~7 C (cHf *1t:7*y 
h7~77FU3. (8C) £»*S*;IS*U 
y h7-<77FUX2 1 A\ *y h7-*»«S«9<D 
?7*y h7-^C(EH-T«-9-5 r *y h7—77FU7. 

(9C) (C»*»A6ftTl'»*. aSfltS««*y h7- 
?7KUX2 8, y h7~ 77FU3.2 

7(i, tcO 



[0 0 3 0] H9 (-) W\ *y h7-*S«illl9fr 

7*y I-7 — 77FUX2 2i}\ *y h7—7g^SB 
9©1r7*y h7— PDizmt^y^y h7— 77 F 
UX (9D) £S*&AS*U 5lft-9-7*y h7—77 
FU2.2 1 6 ©tfT^y h7-?7 FUX 

(6D) lc«£8S*.StlTl^o SMATVS* y h7- 
•77FUX2 8, ftSS58$fcgS*y h7— 77 FUX2 

[00 3 1] E©J:5U\ /^yhtt, **<W7*y 

h7— 7^*y w-tmmwe. samsis&mfrz 

®««(DffilI6^l^7^y h7— K7-^J8 
[0032] 

K7— ?SSi»«Kfe^T» «S«HU#S 

tsmt. mt£*xfmws&t. ivtv torn 
h izmfr&^T-mtiitzz. 1 1 Ltz 0 

[0033] $fc, aWfavwffi/^vhSffl^ 
TiMrr^lMROIt^y h7— ^/Mty H7— 

h7-95I«^^fc^T, SflfflOO^y h7-*Si^ 

L, 8DIBeH«a%fi:ffimic««^y K7— 9SH«S« 
=&HUlBBt^bLf ; :7 ; -^0^$a5t<!:LTKT/i:&/\^y 

SilgMT-l*, B^k* titer— » *m^it 

[0034] 

[ff ffl] *58WW*s a^->aVWI/^7 h 
*ffll^T31«r«a»fflfl-^*y K7-?tf*y h7- 
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mmMmn-ottv h7-*s«gii*Hiir*. 

[0 0 3 5] c©*yh7-*»«eil-Wk ^clfrS 

shit an &*«s«n u# »t«B#ft«]n(c 

L»*l^«H*lfiWfetC5lC«Ml-r***y K7— *S 
^SSa©/^-y h«B8^LTS« (2j7-fe;Wb) . * 

[0 0 3 6] itB&HU9&l'4GHAK$?T& *<D 

f Ctifflil**. r-SttWWfbSftTi^fr 
[00 37] 

KKHirtS. mitt H7-*SHM£«-? 

<b*asa?> 4 1 it9— zt)7-kMt& 4 2ttB»fta 
4 3dtt«fi!Hieffi8eeifs?ss. ^ne 

■7***7** h7— >fcfH3Rat^** K7-* 

fc©j»jw#i;:i!Hi-r*. wTs ««isapjEo^TttiB 

B2£HU^<0fc<0ttH8©|||fk ttflg 
[0 0 3 8] Wffifi»£ffil&ftE1g84 3fi. i:<D*IS& 

B91 0©*y h7-9«aHtB74)«ftfiHdS 
fi§£> *v h7 - ?&il=gB 9 S?a«ffifi»tffillE 
[0 0 3 9] flHHb»£S4 2(& £&3tt9M 17g 

WLtcm®hm®um&wmtm®A 3 kiss ltss 
s. nrafbi*, iw^b-a«<biwiaJ4o?fT3. «h§ 

ft • TOfl&Ultf 4 0 It «Wfb**lfer-**»tt« 

[0 0 4 0] t-* A7 , -b/WbW4 1 |& mfiHLfi 

■*a5ftH«88fttU iB©*vh7"2S«£ 
■*a5fefrti*aj©3ifll7ct LT, ME<0«H*fbx-* 



[0 04 1] H3it B»fb7*-**A7Mr/WbLfc/t 
fry hflMMMfwf *JW4H70*<Dte*H6 
U 3 1 ttft^-bJl/ttOffc 3 2ii7°PMi;UteJ;0 : Fi 
xedParU 3 3 tt«|g&&* y h7-fr»«8«*y h 
7-fr7 KUX, 3 4ttjgfl7t^-> K7-frS«B«* 
yh7~ £7KUX, 3 5 li^OffiOtflBSPx 3 6l*Bg 
^bx-^ttWfflTSS. 

[0 0 4 2] HM3Q*yh7-?8«ttra BWtt 

tony msa^titfasa:^!: tjEWsjw L/cimat * 
t> u»{b7*-*iMiW3 6tc«Mrt-ra. 

[0 0 4 3] *LT» mC/^»HWWt «^5S 
$fcKM*y h7-?7KUX2 7 0B7#iR) lEfiSf 
«iC3««8ijt*7 K7-frSH«HI*y h7~? 
7 KbX 3 3 tc, MffiffiB L»ft^«H«6ttfci: C 5 
Kffllir**^ I- 7 -fr K7-fr7 Kb 

x^iB«-r^o a»©/^y mua7»tt» mm™ 

£B*yh7-fr7Kl/X2 8 (H7#BS) (cUS?-* 
<bC3®&{t7E*y K7~ »«MK»9 h7-*7 K 
U*3 4K« iBO*y h7— ^7* FUZIp-B/^-y h 

[0 0 4 4] H4tt. l3-7-k)W£T-**miLrcrt<r 
y hOJUMIW. C*ltt» H10©*yh7— ^ 
TS *yh"7-^SMJI««7, 9Htt«efi3iLm%^ 

46{c, *y H7— ^S»HSI17. 9fc LT*56W©*y 
h 7— 5? g^gM^^ffl LT ^* t ^ 5 SlWKfe^T* 
Mmi *»6ltl|Wi6^*/^y h*\ H7 

[0 0 4 5] J»ttH3©tiO(E»JSLT^*o iMfljc 
81*7 f-7-^7 KUX2 8<D7 KUXA^S^ai 
©*y H7—?7KUX (1 N) t**u Wt^^SB 
K7-f 7KUX2 7ift»^«6fl!)*'y h7-^ 
7 (6N) iStlfc/tfry Kt-^2 4DA% ^E" 

©**0»TIMfb*h» Bf^bx— ?te»3 6tc^ 
«)*n^„ ilffl5c*y H7-^lMKS«*y t-7— >7 

T^**» H7— fJM)fitt«7<0*y K7— ?7KUX 
(7N) ttrftTf*. «t«ft*yh7— M 
*y H7-- ?7KUX3 3tt, «fi«U#^^i5H^ 

tfi^fc t c 3 icflar * * y h 7— ? Mm 9 <©* •> 

h7— ?7KU7. (9N) f&ftZVZo 
[0 0 4 6] 3Mffl+f7'*y h7-^7KUX2 2tt C 
O/^y h«^**l=«ltLJ:3tLT^**y h7- 
^WWM7flX h7-'?B(cM-r«t»-7 , *'y 
h7— ?7KUX (7B) t*tu »ife^7 , *yh7- 
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*7 1 it, momV h7-?8 

m%iW8(D, h7~ PBlzffiTZyy^'yby 

-typisz (8B) tznz^Zo 
[0 0 4 7] iVr? h1fz.<D&or*mmi:^<bft.in.\£. 

*D©£fl7ttf*-y h7--?gig§£B7. «$§W£SB5fc# 

ya*>n*. ae^T, B©^7c*ii©»*»fttf£E 
mzmvfiitzz wmt z * h 7 - * gHRgng? 

[0048] mmm uwr^mmwftc tzzizm 

BTS*yh7-*SSMS«9tK *56E©«JiE*rr 
**•)/ h7-*jffl8«B£*ftT^**>tt?S*J& M° 

fc©fr£3itf»J«r1-*. *©«»(** a&flBStfifC?* 

ifrii^ctfc c±«©*£, *vh7— ^suaai 
7) % «efi9fte«iraseiiai4 3(<:fi«$ti?^«is 

[0049] BWfltfrtifcfc©?** E t flepJW LfeB 

qretb • «*<fc»8»4 o ici. vjbtoVrv v 
7-$24D K«^fb U E ti*a«©/ y H 8f fi£ 
T\ X©B*£^?&«KN£B6'\i£3. 
[0 0 5 0] 0 5 it, *38E©*y h7-?JggigB© 

i a^mssss^ £ a «NK»eHMBiia 4 

3«WHLT*xy*r*. BSfcW-tiHf, BOBS© 

ztv 74 ■■■mmimtt&mttzmmmzmint. 

Tfl»fbf*. 

Xfy 7"6 ■••2W>*a$fcU:3&{!-r*o 
[00511 46, *BE©*y h7-?iIfI7J5C£|g 

£*B«©*js©*©fcsa.*<Hei42a:<* WiBbb 

B« Lfdlfl* L «fc 3 <!: LT^*«uSK©35n, *Bm© 
[00 52] 



[B93©8b£] yjM^tda < , *»b©* 7h9~? 

BBSBSJctf** H9-^3«i35SM=J:*i«. flHMS 

«*LJ:5tr*«^^ *EfrS3SffiT«(HMil;:B 
®«H L»a^ttH#*3«£fc:W\ ft«D©3ffitSttl£ 

U *h«tBBBL»ft^SfflW*fci:E3l«:<Mi 
T**y K7— 9&MtB!ft>/tt-y MifiEfcLT (A 
7"-fe/WbLT) iM«o 

[0053] *<Dtc&. bb&hu«&i'46hakso 
Tit, tommzmftctzzimmtzzy K7-* 

BBBBSTflMMMD/tt-y h£l*3»TiBM-*fr 
5, H*£©8ttBBE±®n?»«*rato*ifc©ite 

tiTl^ifrS, *©lW*BTE£tfHJ3l». 

[BB©ffi*&KH] 

[B9 1 ] *BSM)*y h 7-*S»BB 

[03] *7M*Mb7 s -**tt*ALfc/tt-'y 

[04] tiftoWr-ZWmUvVr'V h©*f* 

[05] *J^©*yh7-*»«BB©iSffi»ff* 
«-T7P-^^-h 
[06] Black ©+J-7"*y h7-?<hWhite <W7* 
h7~ f t<W*tlT^**y h7-?© 1 fl*^r 

0 

[07] tVrv h©«WMrS*rB 

[0 8 ] BI^5'XT2*B££«tt©S*#B : E7Jl/ 

[09] 01 0©*-y h7-^*«ai*h*y^y h 
©HW8©»k*3ifH 

[01 0] *lifc©+t7*-y h7-7^6J«**y h7 
-7©ftffl«*^-rH 
[^^©SJB^] 

1~6-*tS££|g. 7~9-^->h7-^S^gB, 1 

o-ssftam 1 1 -iBHwai. 1 2-ibwi 

1 3-«K!B1tg|3, 1 4-/\>7 hWSgP, 1 5- 
<>97i-X> 1 6-BEflHHfl& 

2 0-/^7K 24D, 24Di , 24D2 

••■/^7hf-$, 3 1 -A7-t;WUSft, 4 0-iW 

ib • a^ftaraas, 4 1 -r— Ptiy-bMm, 42- 

«*fb3i3£», 4 3"-WMiai£»IIBE«ak 5 0- 
5 6-*y h7— ^SWfiftB, 5 7-5 9- 
A~H, K-tf7'*y h-7-^7. RI**yh7-*WI 
^B 
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